OpenAI

Overview

The OpenAI blueprint monitors API usage, token consumption, costs, and project-level spending across GPT-4o, o1, and other OpenAI models. It collects data from the OpenAI Admin API to provide visibility into how your organization uses OpenAI, detects API keys bypassing the Kscope gateway, and flags billing reconciliation gaps.

Resources Collected

• Organization: Organization identity and metadata
• Projects: All projects within the organization (when using OpenAI Projects for team attribution)
• API Keys: Registered API keys with status and metadata
• Users: Organization members with roles
• Usage Reports: Token consumption (input/output/cached) broken down by model, project, and API key
• Cost Reports: Cost data in USD broken down by project and line item

Prerequisites

• OpenAI organization account
• Admin API key with Admin role

Setup Instructions

1. Obtain Admin API Key

1. Log in to the OpenAI Platform
2. Navigate to Settings > API Keys
3. Create a key with the Admin role
4. Copy the key

2. Configure Crawler

Field	Description	Required
adminApiKey	Admin API key from OpenAI Platform	Yes

3. Required Permissions

• read:organization - Organization info
• read:projects - Project listing
• read:api_keys - API key metadata
• read:users - Organization members
• read:usage - Token usage reports
• read:costs - Cost reports

Data Points

Data Point	Source	Details
Token consumption	Usage API	Input, output, cached input tokens
Model usage	Usage API	Grouped by model (gpt-4o, o1, etc.)
Project attribution	Usage API	Per-project breakdown when org uses Projects
API key identity	API Keys API	Key metadata
Cost per project	Costs API	Amount in USD per project per day
Seat allocation	Derived from Costs API	Subscription line items allocated per user

Sightlines

Gateway Bypass

Flags OpenAI API keys that have no corresponding registered Kscope Dev Token. These keys are accessing OpenAI directly, bypassing gateway metering and governance.

Billing Reconciliation

Shows the coverage gap between OpenAI-billed API costs and Kscope-metered gateway costs. A positive gap indicates spend occurring outside the gateway. This sightline is active once the Kscope Gateway crawler (KA-14120) is deployed.

Seat Governance

Lists organization members whose email cannot be attributed to a known engineer in the Asset Registry.

Notes

• Project-level attribution requires the organization to use OpenAI Projects. If not configured, usage and costs are attributed at the organization level.
• Usage data starts from the earliest API key creation date to avoid paginating through empty history.